$ rpki-client -vvf repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa File: 3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa (raw, json) Hash identifier: xQP0pjDgC0pPyWEl2qOcCOaX00jzJQQKAN2sTOVKJqE= Subject key identifier: D8:3A:72:04:2D:AF:E2:E7:D0:B2:7C:BE:39:10:EE:30:C8:93:E5:E0 Certificate issuer: /CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Certificate serial: 7B1D749639E2A17923BB2C8C429716268B942702 Authority key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa Signing time: Mon 08 Sep 2025 08:02:55 +0000 ROA not before: Mon 08 Sep 2025 07:57:55 +0000 ROA not after: Mon 07 Sep 2026 08:02:55 +0000 asID: 151995 IP address blocks: 175.111.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1d:74:96:39:e2:a1:79:23:bb:2c:8c:42:97:16:26:8b:94:27:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B Validity Not Before: Sep 8 07:57:55 2025 GMT Not After : Sep 7 08:02:55 2026 GMT Subject: CN=D83A72042DAFE2E7D0B27CBE3910EE30C893E5E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:0c:b2:9f:2a:d3:53:78:bf:ca:ed:08:e2: c7:76:41:d9:b0:e2:0d:4d:ad:80:b8:74:24:d6:0c: 82:96:d9:0b:7a:de:df:42:0c:4a:8b:62:aa:0b:aa: d2:f2:21:c6:73:ce:ec:e8:8a:2d:92:19:7d:6d:d6: 52:ed:b8:1f:d8:2b:f1:99:6f:27:46:1f:e4:60:d2: 69:88:a3:6f:57:c8:d0:87:85:7a:47:b9:01:a5:4d: aa:c9:df:24:6b:00:84:aa:77:44:97:68:47:c1:a7: c1:5b:c4:98:b5:6a:94:e4:77:45:99:f2:95:91:ea: 02:ba:a0:51:84:ed:b8:c4:98:5b:8e:e9:7e:a9:fb: 5b:f5:68:92:4c:46:4f:fa:b9:5e:ec:3e:de:9b:9d: 36:de:b6:a9:9b:f2:33:80:c9:d6:e2:93:34:e1:1f: 57:36:c4:e1:d6:db:de:00:b9:88:14:29:55:9a:8c: 34:72:8b:cf:7b:2b:96:e4:54:08:c1:a7:4f:8e:17: 86:79:3f:6e:cf:d9:80:a6:b1:f4:dd:a5:cf:e5:37: 99:89:32:d3:5b:a7:48:f1:d6:b7:83:95:65:aa:af: 4b:d5:f4:87:96:71:44:1c:f3:a9:4c:11:71:dd:49: 7e:36:ee:77:a0:7a:06:88:07:40:a1:1d:f4:80:8b: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:72:04:2D:AF:E2:E7:D0:B2:7C:BE:39:10:EE:30:C8:93:E5:E0 X509v3 Authority Key Identifier: keyid:27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.96.0/24 Signature Algorithm: sha256WithRSAEncryption 90:4c:af:20:0d:11:ac:b8:00:33:a6:d8:b7:93:e0:db:d6:a3: bc:e3:54:89:03:c1:9c:ea:10:6c:01:45:5c:05:38:f8:f5:19: 51:c2:37:68:47:99:34:58:b4:6d:bf:ce:14:27:b5:e7:bb:06: 0f:df:c5:25:e8:d2:3e:0a:21:11:2e:02:60:7f:38:79:16:32: 10:d4:bc:a4:78:d5:4b:53:07:db:75:46:84:d1:a2:97:c7:20: 4d:53:ce:f5:21:04:f1:a6:19:66:b5:5c:cd:51:af:db:16:02: d2:ff:67:ad:46:7f:0c:fa:08:02:97:7a:83:ba:32:73:de:ed: 04:d9:dd:64:b8:6b:6c:51:06:59:01:6c:86:c6:df:34:79:7a: bd:bb:69:c8:96:ee:2a:b1:3c:ff:18:b7:62:db:17:f6:ba:7d: 88:02:d6:59:18:e0:69:3a:fb:3a:23:9c:cb:05:f9:02:b1:41: 80:44:66:51:51:82:58:72:95:61:42:9e:a9:d8:73:b7:18:74: 86:7b:d2:77:39:b8:9e:43:64:df:cd:9a:a1:45:d4:72:6c:94: 93:b5:2e:69:7c:91:53:02:92:e5:88:81:07:76:bc:3f:15:ec: 3d:80:9b:43:9c:92:09:ce:37:fb:14:89:8d:08:5f:99:80:a4: 5f:a3:c0:18 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUex10ljnioXkjuyyMQpcWJouUJwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCMkNFOTZGQUU4RTE3NjNBM0MzMERCMzNDM0JCRDhG MDUxODM4QjAeFw0yNTA5MDgwNzU3NTVaFw0yNjA5MDcwODAyNTVaMDMxMTAvBgNV BAMTKEQ4M0E3MjA0MkRBRkUyRTdEMEIyN0NCRTM5MTBFRTMwQzg5M0U1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETwyynyrTU3i/yu0I4sd2Qdmw 4g1NrYC4dCTWDIKW2Qt63t9CDEqLYqoLqtLyIcZzzuzoii2SGX1t1lLtuB/YK/GZ bydGH+Rg0mmIo29XyNCHhXpHuQGlTarJ3yRrAISqd0SXaEfBp8FbxJi1apTkd0WZ 8pWR6gK6oFGE7bjEmFuO6X6p+1v1aJJMRk/6uV7sPt6bnTbetqmb8jOAydbikzTh H1c2xOHW294AuYgUKVWajDRyi897K5bkVAjBp0+OF4Z5P27P2YCmsfTdpc/lN5mJ MtNbp0jx1reDlWWqr0vV9IeWcUQc86lMEXHdSX427negegaIB0ChHfSAixXfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2DpyBC2v4ufQsny+ORDuMMiT5eAwHwYDVR0j BBgwFoAUJ7LOlvro4XY6PDDbM8O72PBRg4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTUxMWE4YS0zMGRhLTQ2NzAtYTAxMC03OTI2ZDdjZDUxMGIvMC8yN0IyQ0U5NkZB RThFMTc2M0EzQzMwREIzM0MzQkJEOEYwNTE4MzhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCMkNFOTZGQUU4RTE3NjNBM0MzMERCMzNDM0JCRDhGMDUx ODM4Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1NTExYThhLTMwZGEtNDY3MC1h MDEwLTc5MjZkN2NkNTEwYi8wLzMxMzczNTJlMzEzMTMxMmUzOTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr29gMA0GCSqG SIb3DQEBCwUAA4IBAQCQTK8gDRGsuAAzpti3k+Db1qO841SJA8Gc6hBsAUVcBTj4 9RlRwjdoR5k0WLRtv84UJ7XnuwYP38Ul6NI+CiERLgJgfzh5FjIQ1LykeNVLUwfb dUaE0aKXxyBNU871IQTxphlmtVzNUa/bFgLS/2etRn8M+ggCl3qDujJz3u0E2d1k uGtsUQZZAWyGxt80eXq9u2nIlu4qsTz/GLdi2xf2un2IAtZZGOBpOvs6I5zLBfkC sUGARGZRUYJYcpVhQp6p2HO3GHSGe9J3ObieQ2TfzZqhRdRybJSTtS5pfJFTApLl iIEHdrw/Few9gJtDnJIJzjf7FImNCF+ZgKRfo8AY -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:00 2025 by rpki-client